Privacy Policy

Ggumtle Lab ("we") respects your privacy. This policy explains what information TimeMirror ("the Service") collects and how it is used, stored, and deleted.

1. Information We Collect

Account information

• Email sign-up: your email address and password (stored encrypted; we cannot see the original)
• Sign in with Apple or Google: the account identifier and email address (Apple's "Hide My Email" is supported)

Records you create

• Activities and groups (names, colors, display settings)
• Time records (start and end times per activity)
• If you use the Friends feature: nickname, invite code, friend relationships, and daily summaries shared with friends (daily chart and per-activity totals)

Health data (optional — only if you turn it on)

• If you enable Apple Health integration, the Service imports workout and sleep records (type, start and end times) as time records.
• Imported records are treated like any other time record and are stored on our server to back up your account.
• We do not collect any other health information (such as heart rate), and you can turn the integration off at any time.

What we do not collect

• No location data, contacts, advertising identifiers, or behavioral analytics.
• The Service currently contains no ads and no third-party analytics tools.

2. How We Use Information

• Providing core features: storing time records and showing statistics
• Account-based backup and sync across devices
• Friends feature: daily summaries are visible only to friends you have accepted (your original time records are always private)
• Account management and support

3. Our Promise About Health Data

Data imported from Apple Health is used only to display and summarize your records in the Service. It is never used for advertising or marketing, and never sold or disclosed to third parties.

4. Retention and Deletion

• Your information is kept while your account exists.
• Using Settings > Account > Delete Account in the app permanently deletes all server data (account, time records, friend data) and the records on your device, immediately.

5. Third Parties

• We do not sell or share your personal information with third parties.
• Data is hosted on Supabase, a cloud database service, in the Seoul (South Korea) region.

6. Your Rights

You can view, edit, and delete your records — and delete your account — directly in the app at any time. For other requests, contact us at the address below.

7. Security

All data is transmitted over encrypted connections (HTTPS), and server-side access controls ensure only you can access your data. Passwords are stored in a non-reversible form.

8. Children

The Service is not directed to children under 14, and we do not knowingly collect personal information from children under 14.

9. Changes to This Policy

If this policy changes, we will post the update on this page. Significant changes will also be announced in the app.

10. Contact

Privacy officer: Ggumtle Lab
Contact: ggumtlelab@gmail.com